The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases. A series of malicious packages in the Node.js package manager (npm) code ...
A major supply chain attack on the NPM repository briefly threatened crypto users worldwide. Malicious code was pushed into widely used JavaScript packages with billions of downloads. Developers moved ...
A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on ...
A routine scan of the NPM open source code repository in April turned up several packages using a JavaScript obfuscator to hide their true function. After further investigation, analysts with ...
A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the ...
AI coding tools and autonomous agents are generating more code, pulling in more dependencies, and interacting with open source at a scale humans have never seen before," said Dan Lorenc, CEO and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results